IT24245: USER CAN'T ACCESS CERT:/// DIRECTORY VIA CLI EVEN WITH ADMIN USER

Fix packs for DataPower Gateway version 7.6

APAR status

• Closed as program error.

Error description

• It is not possible for the user to display the
  cert:/// and sharedcert:/// directory via the command line
  interface, even if they have appropriate access.
  This affects all users, including admin.
  This happens wen your RBM configuration includes the option
  "Enforce CLI".
  Example error:
  xi52(config)# dir cert:
  % Access Denied - use 'cancel' to exit any submode.
  xi52(config)# dir sharedcert:
  % Access Denied - use 'cancel' to exit any submode.
  

Local fix

• Turn off  "Enforce CLI " option.
  

Problem summary

• Newly Implemented RBM Checks that include static Cert Directory
  checks can overwrite RBM policies and prevent read access to
  cert directories.
  

Problem conclusion

• Fix is available in 7.6.0.7 and 7.7.1.0
  
  For a list of the latest fix packs available, please see:
  http://www-01.ibm.com/support/docview.wss?uid=swg21237631
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• 0
  

Fix information

• Fixed component name

  DATAPOWER

• Fixed component ID

  DP1234567

Applicable component levels

• R770 PSY

     UP